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User-System Interaction 

The ECS portion of the CAL Time Sharing System provides a number of 
actions which are available to the user so that he can interact with 
the system. The actions apply to the objects created and maintained by 
the ECS system: files, maps, allocation blocks, event channels, capability 
lists (C-lists), operations, processes , subprocesses, and class codes. A 
record is kept in a table in ECS, called the Master Object Table (MOT), of 
all objects existing at any given time in the system. Each entry in MOT 
gives the name of the object and its ECS location. 

The user makes a call upon the system by setting up the appropriate para- 
meter list for the action he wants to initiate, prior to passing ccntrol 
to the system entry/exit routines by executing a CEJ instruction. (The 
CEJ , Central Exchange Jump, causes the current contents of the 6400 central 
processor's registers to be exchanged with a similar 15 word package in 
Central memory.) The system entry/exit routines determine the nature of 
the user's call, collect and check the parameters needed for the action, 
transfer control to the proper system action routine, and finally, return 
control to the user (by another CEJ, which restores the registers) after 
the system action is completed. 

Requesting a System Action 

The CEJ instruction used to call the system supplies the information required 
to initiate the action and return to the user. (See Figure 1.) In parti- 
cular, it is expected that the CEJ was in the upper 30 bits of the instruc- 
tion word; of these 30 bits, the lower 18 bits are used by the system to 
locate the user's input parameter (IP) list. If this 18 bit field is nega- 
tive, the complement of the low order 4 bits specify which register in the 
user's exchange package contains the input parameter list pointer (e.g., 
-3 -^ B3; -10 ->- X2). Otherwise, the 18 bit field itself is taken to be the 
IP list pointer. This pointer is checked for legality (i.e., it must be 
positive and less than the user's field length) and an error is generated 
if appropriate. 



Each entry in the input parameter (IP) list is either a 60-bit data item 
or an index into the user's capability list (C— list), desigaaciug a 
capability. Each capability residing in a C-list authorizes access to a 
particular object in addition to giving the object's type (file, process, 
event channel, etc.) and the set of actions allowed on that particular 
object (option bits). 

The first parameter, that is, the first word of the IP list (called IPO), 
is always expecLed Lo be an index into tue user s capauij-ity j.xst. 
This parameter, after being checked for legality (i.e., it must be 
positive and within the range of the full C-list), is used to fetch the 
capability tor the operation which specifies the action to be performed, 
and the nature of the parameters of the action. (If the capability is not 
for an operation, an error is generated.) 

Operations are ECS objects which direct the transfer of control from the 
user to the system when the user calls upon the system. They identify the 
action (s) to be taken by the system and direct the passing of parameters to 
the system or between user subprocesses (see SUBPROCESSES) . An operation 
consists of one or more orders, each of which designates a particular sys- 
tem action, and a set of parameter specifications which indicate the type 
(capability or datum) of each parameter required for the action and the 
required options for each capability parameter. Basically, the parameter 
specifications in the operation are of two genere — parameters which are 
permanently "fixed" within the operation and those that are to be provided 
by the user. \«lhen an operation is first created, before any of its parameters 
have been specified, all parameter specifications are typed "none". Before 
the operation can be used, all of its parameters must be specified using the 
actions provided for specifying operation parameters (see p. 50). If the 
action is parameterless, the operation contains no parameter information. 

The system entry/exit routine reads the first order of the operation and 
uses the parameter specifications to construct an actual parameter list . 
This list consists of parameters which are "fixed" in the operation and of 
user-supplied parameters drawn from the IP list. The IP list should con- 



tain, in successive words, datum parameters (indicated below by "D:") 
which are transferred directly to the actual parameter list, and C-list 
indices (indicated below by "C:") which designate capabilities in the 
user's full C-list. Two words are copied to the actual parameter list 
for each capability parameter (capabilities are two words long) and one 
word is copied for each datum parameter. During the construction of the 
actual Tiarameter list errors will be <^enerated if 1^ a C— list index is 
bad (i.e., is negative or outside the full C-list); 2) if the type 
and options (indicated below by "OB.x") in the capability do not corres- 
pouu to tuuse speclj.iea oy tue parameter iui-OtmaLiuii in Lhe o(jeiatiuii 
(this checking is not performed if the parameter specification is "any 
capability"); or 3) if a "none" parameter specification is encountered, 
in which case parameter processing terminates. 

After the actual parameter (AP) list is completed the operation is checked 
to see if the action is a subprocess call or jump. If so, a flag bit will 
indicate the presence of a class code (the subprocess name) in the opera- 
tion. In this case, the operation also contains a parameter type bit 
mask indicating the type (capability or datum) of each parameter . The 
system entry/exit routine places the class code from the operation, the number 
of parameters, and the bit mask into the user's process descriptor in the 
actual parameter list area. 

Finally, the ECS action number is extracted from the operation and is used 
as an index to a jump to the proper entry point for the desired ECS action. 
When the action is completed, control returns to the user. 

Under some conditions, when the normal function of an ECS system action 
cannot be carried out but the condition is not serious enough to warrant 
the generation of an error, an F-return will result. If this occurs, the 
count of F-returns initiated for the operation is increased, and the 
operation is checked to see if it contains any more orders (which are spe- 
cified as alternative actions). If so, the next order of the operation 
is interpreted. This process is identical to the one just described, 
except that the actual parameter list contains the parameters for all 
orders up to and including the current one. If the F-return count reaches 
the number of orders in the operation, control is returned to the user. 



There are two different ways in which control is returned to the user 
depending upon whether an action completed normally (possibly after one 
or more F-returns) or the F-return count became equal to the number of 
orders in the operation. The normal return causes the user's P-counter 
to be incremented by the number supplied by the user in the low order 18 
bits of the CEJ instruction word originally used to call the system. The 
new P-counter must be positive and less than the user's field length; other- 
wise an error is generated. When the return to the user results from an 
ultimate F-return, the user's P-counter is left unchanged. 

Figure 1 System Calling Instruction 
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Figure 2 Example of Input Parameter (IP) list and Actual Parameter 
(AP) list Interaction (assuming no fixed parameters*) 
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Fixed parameters will be inserted into the AP as they are encountered 
according to the parameter type bits. 



Errors : The use of improper parameters in making an ECS system call is 
considered to be an error on the part of the process which is making the 
call. When an error is detected, it is first assigned an error class and 
number. The class identifies the type of the error, while the number pin- 
points the particular error within a type. Furthermore, associated with 
each subprocess within a process is an error selection mask (ESM) indicating 
the classes of errors the subprocess is prepared to handle. The "ancestors" 
of the current subprocess (see p. 31) are checked (starting with the current 

suborocess) to find a suborocess whose ESM indicates it is willing to hanHIp 

.■ ' 1. ~ " <_j ^ - — - — 

this class of errors. The subprocess which accepts the error is called and is 
passed the error class and number. Execution in the error processing subproc- 
CcSS IS imtiatcu. at tue normax entry point— j.. A precauLiun is taken against 
error loops; the subprocess which accepts the error is temporarily disquali- 
fied from accepting any more occurrences of the errors in the same class. 

Possible Errors during System entry/exit processing of 
an ECS system action call 
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Error Descript ion 



The IP list pointer address is negative 

The IP list pointer address is greater than the user's 
field length 
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C-list index negative 
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C-list index too large (not within full C-list) 
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First parameter (IPO) does not point to a capability for 
an operation 
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The operation does not exist 


7 
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"NONE" parameter specification encountered 


7 
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Type or options bad for a capability parameter 
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C-list does not exist 
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IP list extends passed user's field length 
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The new P-counter is negative on return to user 
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The new P-counter exceeds the user's field length 
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No subprocess to take error class 



System Actions 

All system actions which can currently be requested by the user are des- 
cribed below. All actions are calls upon the ECS system except for the 
subprocess call and return actions. A summary of required parameters and 
possible errors appears in the Appendices. 

Allocation Blocks 

An allocation block is an ECS object which regulates allocation of ECS 
space and CPU usage. An allocation block is provided with a sum of money 
and a portion of ECS space, which can only be obtained from another alloca- 
tion block. (At system initialization a Master Allocation Block is created 
and provided with an infinite amount of money and all of the space in ECS.) 
Every object is associated with an allocation block; the objects associated 
with each allocation block are linked to that allocation block in a two- 
way circular list headed by the allocation block itself. The objects of 
ECS, therefore, form a tree whose root is the Master Allocation Block. 

Each allocation block is billed for CPU-time used by its descendant processes 
and will be charged rent on the ECS space occupied by its descendant objects. 
There are four actions which the user can invoke to manipulate allocation blocks. 
He can 1) create an allocation block, 2) transfer funds from one allocation 
block to another, 3) request the capability (with all option bits set) for 
the n-th object in the list of an allocation block, and 4) destroy an allo- 
cation block. 

A. Create an Allocation Block 

IPl C: Allocation Block (OB.CREAB) 

IP2 D: C-list Index for returned capability 

When creating an allocation block, the user must first specify the index of 
the allocation block which is to provide the ECS space occupied by the new 
allocation block. The second parameter provides a C-list index where the 
system can return the capability for the newly created allocation block. 
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Possible errors while creating an Allocation Block 

Description 

Allocation block does not exist 

No ECS available in that block 

No money available in that block 

C-list index is negative 

C-list index exceeds full C-list 

B . Transfer funds (and/or space) from one Allocation Block t o another 

IP2 C: Allocation block (donee) (OB. GET) 
IP3 D: Space to be transferred 
IP4 D: Money to be transferred 

Monev and/or ECS space may be transferred from one allocation block to 
another using four parameters. The indices for the capabilities of the 
donor and donee allocation blocks must be given as well as the amount of 
money and/or space to be transferred. 

Possible errors: 

Description 

No such allocation block 

Money specified for ECS not available 

Money specified for CPU time not available 

Money specified for ECS is negative 

Money specified for CPU time is negative 

C . Return capability for n-th ob ject in Allocation Block* 

IPl C: Allocation block (OB. GOD) 

IP2 D: Full C-list index for returned capability 

IP3 D: Index of desired object (n) 

This action returns to the user the capability for any desired object 
which is a first generation descendant of an allocation block. The first 
parameter is the index of the capability for the allocation block 
to which the object is associated; the second 

^~ ' " 

Use of this action is highly restricted. 
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parameter specifies a C-list index where the system will return the capa- 
bility, and tne tuirci parameter gxvea tne positxon in tne -List oi tne 
desired object. If this index is zero, a value of one is assumed and the 
capability for the first object in the list is returned. If n exceeds 
the number of objects in the list for the specified allocation block, an 
F-return is made. If the capability is returned, all options bits are set. 

Possible errors: 

#^ Description 

Allocation block does not exist 

4 C-list index is negative 

5 C-list index exceeds full C-list 
Index for object is negative. 

D. Destroy Allocation Block 

IPl C: Allocation Block to be destroyed (OB.DSTRY) 

When an allocation block is destroyed, there must be no objects associated 
with it. The ECS space and money owned by the allocation block as well as 
its expenditures are reflected back to the allocation block which is its 
father in the tree. If the allocation block to be destroyed still has objects 
in its chain, it cannot be destroyed, and an F-return is made. 

Possible errors ; 

Class £_ Description 

6 Allocation block does not exist. 

C-List Actions 



User access to all objects within the ECS system is controlled by capabilities. 
A capability identifies the object it refers to, specifies the type of the 
object, and the set of allowed actions on that object (options). Capaoilities 
for objects accessible by a given subprocess are grouped together in capabilit) 
lists (C-lists) which are themselves objects within the ECS system. Indivi- 
dual capabilities are referred to by their index within a C-list. Since the 



capability, residing in a C-list, authorizes access to an object, the user 
is never allowed to fabricate a capability. The system creates a capability 
with all options allowed when an object is created. System actions are pro- 
vided to permit the user also to create a C-list, as well as to examine a 
capability, to copy capabilities between C-lists and within a C-list, and to 
downgrade the option mask. Thus, the user can transfer the right to access 
an object and can curtail that access, but he may never manufacture that 
right or increase the set of allowable actions on the object. He must ask 
the system to perform these actions for him. 

A C-list is assigned to every subprocess within a process. For every process 
there exists a sequence of subprocesses called the full path. Corresponding to 
the full path, the full C-list is defined as the concatenation of the C-lists 
belonging to the subprocesses in the full path. When referring to capabilities 
in the full c-list, the capability index is interpreted as if the C-lists in 
the full C-list were joined to form one long C-list. 

A. Create a C-list 

IPl C: Capability for allocation block (OB.CRECL) 
IP2 D: Index in full C-list to return new capability 
IP3 D: Length of new C-list 

A capability list (C-list) is a sequence of capabilities and "empty" positions. 
Each C-list is filled with "empties" (zero words) upon creation. To create 
a capability list, the user must supply the index of the Allocation block 
which funds the space occupied by the C-list. In addition to the length 
of the new C-list, the user must supply an index in the full C-list for the 
capability for the new C-list. 

Possible errors while creating a C-list: 

Modifier Description 

Allocation block does not exist 
No ECS available 
No money available 
2 C-list index is negative 

2 C-list index exceeds full C-list 

3 Length of new C-list <^ 
3 Length of new C-list exceeds core buffer area 
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B. Display a Capability from the Full C-list 

D: Index in full C-list 

When referring to capabilities within the full C-list, the capability index 
used is interepreted as if the C-lists in the full C-list were joined to 
form one long C-list. Thus, the index of the desired capability is all 
that is required to display it. The two words of the capability are returned 
in X6 and X7. 







59 








u 


X6 


I option mask 

1 






type 






59 


21 


17 







V7 


i 


! 


MOT 







Possible errors while displaying a capability: 

Class _# Modifier Description 

2 4 1 Capability index negative 

2 5 1 Capability index exceeds full C-llst length 

C. Display a Capability from an arbitrary C-list 

IPl C; Capability for C-list 
XP2 D: Index in the C-list 

To display a capability from a C-list which is not in the full C-list, the 
user must specify both the index of the capability for the C-list and the 
index within that C-list of the desired capability. The capability is 
returned as in B- above. 

Possible errors while displaying a capability from aribtrary C-list: 

Class _# Modifier Description 

2 4 1 Capability index negative 

2 5 1 Capability index exceeds C-list size 

8 C-list does not exist 

D . Copy a Capability within full C-list and Decr ease the Options 

D: Index of desired capability 

D: Index of destination C-list entry 

D: Mask of options to preserve (in top 42 bits - bottom 18 ignored) 

The user can copy a capability from one location in the full C-list to 
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another and in doing so may decrease the number of allowed options. Recall 
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option bits (the high order 42 bits of the first word) set. The user must 
indicate the C-list index of the capability he wishes to copy, the C-list 
index where the altered capability will be placed, and a bit-mask which 
will be logically "ANDed" with the option bits of the original capability 
to produce the option mask for the new version of the capability. 

Possible errors while copying a C-list and decreasing the options: 
Class #_ Modifier Description 

2 4 1 Index of desired capability is negative 



2 5 1 Index of desired capability is too large 
2 5 2 Index of desintation C-list entry too large 

E . Copy capability from Full C-l ist t o Arbitrary C-lis t_ (and vice-versa) 

IPl C: Destination (source) C-list (OP.CPYIN, (OB.CPYOT)) 

IP2 D: Index within destination (source) C-list of capability 

IP3 D: Index in the full C-list of source (destination) capability 

In order to simply transfer a capability between the full C-list and an 
arbitrary C-list two parameters are required to indicate the location of 
the capability in the arbitrary C-list, and a third to locate the capa- 
bility in the full C-list. 

Possible errors : 
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F . Change Unique Name in Capability 

IPl D: C-list index of object (OB.CHNAM) 

This action allows the user to change the unique name of an object. The 
system generates a new capability for the object with all option bits set 
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thereby invalidating all old capabilities for that object. The capability 
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allows such a change (OB.CHNAM). If the object is a file for which there 
are references in any map entries, all such maps will be recompiled. 

Possible errors while changing unique name: 

Class #^ Description 
8 1 No such object 



G. Destroy a C-list 

IPl C: Capability for C-list (OB.DSTRY) 

The user may destroy a C-list when he no longer needs it; only the index 
of a capability for the C-list is required. If the C-list to be destroyed 
is in the full path of the user's process, an F-return is initiated and 
the C-list is not destroyed. 

Possible errors while destroying a C-list: 

Class _# Description 

8 C-list does not exist 

III Fiie rtCtions 

Files are organized in a tree structure (see Figure 3). The leaves of the 
tree are called data blocks and contain the addressable words of the file. 
The non-terminal nodes of the file tree are called pointer blocks and con- 
tain links to either data blocks or other pointer blocks. Empty or non- 
existent portions of a file are not allocated space in ECS until they are 
needed. The user can create a file, add and/or delete parts (data blocks) 
of a file; he can check for missing data blocks and read the shape (para- 
meters of the tree structure) of a file; he can transfer data blocks of the 
same size within a file or from one file to another, and finally, he can 
read (write) information from (into) a file. 
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A. Create a File 

IPl C: Capability for allocation block (OB.CRFIL) 

IP2 D: C-list index to return capability 

IP3 D: Number of levels in the file 

IP4 D: Pointer to a list of shape numbers 

When a file is created, only the file descriptor is constructed (see Figure 
4). The file descriptor contains a pointer to the root of the file tree 
(initially zero since no data or pointer blocks exist). The user supplies 
an index for the capability of the Allocation block which is to fund the 
ECS space occupied by the file. Identification of the funding allocation 
block is also kept in the file descriptor. The user must also supply a 
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created (all option bits in the capability for the new file are turned on). 
The last two parameters indicate the number of levels (n) contained in the 
structure of the file tree, and a pointer to a list of n+1 shape numbers (S 
through S ), the first n of which indicate the number of branches from 
each block at each level; the last (Sn) gives the uniform size of all data 
blocks in the file. A 'zero level file" (IP3 = 0) consists of a single data 
block of length Sn (n=0) . Each shape number (SO excepted) must b e an 
integral power of two . The last two parameters are used by the system 
to complete the file descriptor. 

Figure 4 File Descriptor 



< POINTER > 



< ALLOCATION BLOCI<.> 



<LENGTH> 



; 



A 



Pointer to Root of File Tree 
Allocation Block Identification 
File Length 



Description of file shape 
(using Si's) 



SHAPE = (S^,S^,...,S ) 
U i n 

n 

-■LENGTH> ::= (maximum file address) + 1 = 11 S, 

i=0 ^ 



15 



Class 


i 


6 





6 


1 


6 


2 


2 


4 


2 


5 


2 


2 


2 





2 


1 


2 


1 


3 


7 


3 


8 


3 


9 


3 


10 



Possible errors while creating a file: 

Modifier Description 

Allocation block does not exist 

No ECS Available 

No money available 

C-list index is negative 

C-list index exceeds full C-list 
4 Pointer to list of shape numbers is negative 
3 Level number n < 

3 Level number is too large 

4 Poi'nter to lisf of shape numbers plus list 
length exceeds user's FL 

Negative shape number 

1 7 

Shape number exceeds 2 

Shape number other than SO not a power of 2 

Total size of file is too large 

B. Create a Block 

IPl C: Capability for file (OB.CREBL) 
IP2 D: Address of block in the file 

Once a file has been created, data blocks of the declared length (Sn) may 
be added subsenuentlv, one at a time, to hold data or code. (See Figure 5.) 
A count of the map entries which reference the data block is maintained 
with each data block. (This count is important when deleting a block - see 
below). To create a block, the user supplies the index of the capability 
for the file to which the block is being added, and the address in the file 
where the block is to be placed. 

When a data block is added to a file, it may also be necessary to create 
some or all of the pointer blocks between that data block and the file 
descriptor. Recall that pointer blocks are required to link the file 
descriptor to the data blocks in any file with more than one shape number 
(i.e., not a zero level file). 



Figure 5 Data Blocks 
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Possible errors while creating a block: 
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Description 

Allocation block does not exist 

No ECS available 

No money available 

The file does not exist 

The address of the new block is negative 

The address of the new block is greater than 
the file length 

The address of the new block indicates an already 
existing block 



C. Check for missing blocks 

IPl C: Capability for file 

IP2 D: Address of block in file 

Allows the user to check for the presence of a block: The parameters required 
are the index of the capability for the file to which the block belongs, 
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and the address within the file where the block is supposed to be located. 
The number of missing levels in the path from the root of the file tree 
to that particular block is returned in X6. Thus, if the block is pre- 
sent, X6 -^ 0; if the n level file is empty, X6 -«- n; and if only the data 
block is missing (its pointer block is present), X6 ^ 1. 

Possible errors while checking for missing blocks: 

Modifier Description 

The file does not exist 
2 The address of the block is negative 
2 The address of the block is too large 

D. Read the Shape of a File 

IPl C: Capability for file 

IP2 D: Address of buffer for the shape numbers 

IP3 D: Buffer size 

The shape of a file is described by a sequence of positive integers (SO, SI, 
...,Sn), each of which is the number of branches in the file tree at each 
node of level i (0 £ i £ n) . Each Si (i > 0) must be an integral 
power of two. The user can obtain these shape numbers by specifying the 
index of the capability for the file whose shape he wants to read, and the 
address and size of a buffer for the shape numbers. The number of levels 
in the file is placed in the first word of the buffer and the shape num- 
bers (SO,...,Sn) are placed in succeeding words until either the buffer 
is full or all the shape numbers have been passed. 

Positive errors while reading shape: 

Description 

File whose shape is to be read does not exist 

Buffer address is negative 

Buffer size _< 

Buffer address + size exceeds user field length 
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E. Read (write) a File 

IPl C: Capability for file (OB.RDFIL, (OB.WFILE) 

IP2 D: Address in file 

IPS D: Address in Central Memory 

IP4 D: Count of words to be transferred 

The action of reading (writing) a file transfers words between the address 
space of the running (current) subprocess and the data blocks of a file. 
In addition to the capability index for the file, the user specifies the 
address in the file of (for) the desired information, the address in Cen- 
tral Memory of the area to be read into (written from) , and the number of 
words that are to be read (written). If a transfer is requested which 
involves a file address corresponding to a non-existent data block, the 
transfer proceeds until the non-existent file address is encountered, where- 
upon an F-return is initiated. The ac'tions to read the shape of a file (D) 
and to check for missing blocks (C) can be used to check how far the trans- 
fer proceeded. 

Possible errors while reading (writing a file) : 

Description 

File does not exist 

Word count negative 

File address negative 

CM address negative 

CM address plus word count exceeds user's field 
length 

2 14 File address plus word count exceeds user's field 

length 

F. Move a File Block 

IPl C: Capability for source file (OB.RDFIL, OB.DELBL) 

IP2 D: Address in source file of source block 

IP3 C: Capability for destination file (OB.WFILE, OB. CKEBL) 

IP4 D: Address in destination file of destination block 

File blocks can be transferred between files whose data block sizes (Sn) 
are equal. In addition to the capability indices for the source and des- 
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tination files, the system expects to receive from the user the address 
of the source block within the source file and the address in the destina- 
tion file to which the block is being moved. If the block to be moved 
is referenced by a map, moving it (which deletes it from the source file) 
would cause problems when swapping, therefore an F-return is made. 



Possible errors while moving a block: 
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4 
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2 or 4 
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2 or 4 



Des cription 

Block to be moved does not exist 

Files do not have equal data block sizes 

File address negative 

File address too large 



G. File t o file copy 

IPl C: Source file (OB.RDFIL) 

IP2 D: Address in source file 

IP3 C: Destination file (OB.WFILE) 

IP4 D: Address in destination file 

IPS D: Count of words to be transferred 

This action copies a specified number of words from one ECS file to another 
ECS file. In addition to the capability indices for the source and des- 
tination files, the system expects the user to specify the source and des- 
tination addresses and the number of words to be copied. 

Possible errors during a file-to-file copy: 

Description 

File address is negative 

File address is too large 

Word count is negative 

File address plus word count is too large 

H. Delete a Block from a File 

IPl C:Capability for file (OB.DELBL) 
IP2 D:Address of block to be deleted 

A block can be deleted from a file as long as it is not referenced by an 
entry in some subprocess map (reference count = 0). The user must supply 
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the capability index for the file and the address within the file of the 
block which is to be deleted. If the block is referenced by a map entry, 
an F-return is made. 

Possible errors while deleting a block: 

Class _# Description 

3 3 Block to be deleted does not exist 

I. Delete a File 

IPl C: Capability for file (OB.DSTRY) 

When a file is deleted, it must not contain any data blocks, i.e., it must 
consist only of the file descriptor. Only the capability index of the 
file is required as a parameter. 

Possible errors while deleting a file: 

Class #_ Description 

3 File to be deleted does not exist 
3 6 File to be deleted is not empty 

I V Process and Subprocess Actions 

^rocesses are tnc acuxve ej-ements Oj, tue xitCij portxon of tue Txme Siiaring 
System. Only within the context of a process may code be executed and 
system actions initiated. A process consists of 1) a set of central regis- 
ters (called the exchange jump package), 2) a set of subpr ocesses organized 
in a tree structure, 3) a call stack recording the flow of control among the 
subprocesses, and 4) a set of state flags describing the state of the pro- 
cess . 

There are system actions to create, examine, destroy and manipulate the 
elements of a process. There are also actions which control the processing 
environment of a process by transferring control from one subprocess to 
another and by controlling the error processing and external interrupt 
status of the process. 
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A. Create a Class Code (subprocess name) with new permaraent part 
IPl C: Capability for class code 

A class code is a protected 60-bit datum which is used to identify a subprocess. 
within a process and to identify classes of users to the directory system. Tlie 
60 bits are divided into two 30-bit parts; the upper 30 bits constitute th-e per- 
manent part and the lower 30 bits, the temporary part. This action causes a new 
class code to be constructed by the system with a permanent part that is differ- 
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turned in the full C-list at the location specified by the parameter of the action. 
Possible errors while creating a class code: 

Only those detected during System entry/exit. 

B. Set temporary part of class code 

IPl C: Capability for class code (OB.TMP) 
IP2 0: C-list index for modified class code 
.IP3 D: New temporary part (30 bits) 

The temporary part specified by the user is inserted into the class code 
(lower 30 bits). This action may be used to create "classes" of class 
codes which have the same permanent part and different temporary parts. 
The class code with the new temporary part is returned in the full C-list 
at the snecified location. 



C. 



Create a Process 



IPl C 

IP2 

IP3 D 

IP4 D 

IPS C 

IP6 D 

IP7 D 

IPS D 

IP9 D 

IPIO C 

IPll C 

IP12 D: 

IP13 D: 



Capability for Allocation block (OB.CREPR) 

C-list index for returned process capability 

Number of event channel chaining words 

Number of stack entries 

Capability for class code for initial subprocess (OB.SONSP) 

Number of map entries in initial subprocess 

Compiled map buffer size for initial subprocess 

Subprocess field length 

Subprocess entry point 

Capability of C-list for subprocess (OB.LCCCL) 

Capability of file for 1st map entry (Read/Write: OB.WFILE, 

OB.iy^FIL, OBPLMAP) for initial subprocess 

Address within file 

Address in CM 
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IP14 D: Count of words to be swapped . . 

IP15 D: Capability of file for 2nd map entry (Read Only: OB.RDFIL, 

OB.PLMAP) for Initial subprocess 
IP16 D: Address within file 
IP17 D: Address in CM 
IP18 D: Count of words to be swapped 

There are 18 parameters required for the system action which creates a pro- 
cess. The first four are used to construct the process descriptor while 
the remaining 14 are necessary to specify the initial subprocess which is 
created alon^ V7ith the process = As usual when creating any system object, 
the first two parameters required are the C-list index of the Allocation 
block which is to fund the area in ECS where the object is to be placed, 
and the C— list index where Liie system wij_j- return tue capauixity xor tiie 
object. 

The data necessary to maintain and run a process are gathered together in 
the process descriptor, which is stored in two sections: the fixed length 
process descriptor and the variable length process descriptor. These two 
sections of the process descriptor are copied into CM when the process is 
being run on the CPU. While the process resides in ECS (Figure 8), the 
fixed length descriptor and variable descriptor are separated by the pro- 
cess queuing word buffer, used when a process is hung on one or more event 
channels. Parameter IP3, giving the size of the queuing word buffer, is 
contaxneu xn the i.irst woru. ox uiie process uescrxp^or. 

The call stack, which records the flow of control among the subprocesses 
belonging to the process, is contained in the variable length process des- 
criptor. Each entry in the call stack contains the information necessary 
to reinitiate processing where it was terminated due to a subprocess call. 
The total number of stack entries the process can accommodate is supplied 
by the user in LP4 when the process is created. 

Among the parameters defining the initial subprocess, the first six (IP5- 
IPlO) are used to fill in the subprocess descriptor and the last eight 
parameters specify the contents of the two initial map entries (Read/Write 
and Read Only) which control the swapping of the local address space. The 
data necessary to describe a subprocess are gathered into the subprocess 
descriptor. The user supplies 1) the class code (identifying name) of the 
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PROCESS DESCRIPTOR (IN ECS) 
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subprocess, 2) the number of entries which will be in the logical map, 
3) the size of a buffer area which will be allocated to hold the compiled 
map, 4) the length of the subprocess local address space, 5) the entry 
point of the subprocess where execution begins when it is called, and 6) a 
C-list index designating the local C-list of the new subprocess. The 
logical map contains an entry for each contiguous portion of information 
which is to be copied between ECS files and the local address space in CM 
of a subprocess at the beginning and/or end of the processing within that 
subprocess. To expedite this procedure, the compiled map is generated 
from the logical map, using the absolute ECS addresses of the sections of 
ECS files referenced by the logical map entries. Since one map entry may 
span several data blocks in a file, the size of the compiled form of the 
map will increase accordingly. The length of the local address space 
(IPS) of a subprocess is the upper limit on the information copied into 
CM under the direction of the subprocesses map. The local C-list of a 
subprocess controls the objects which the subprocess can access. 

The eight remaining parameters specify the contents of the first two logical 
map entries, which describe the initial body of the subprocess. The first 
map entry (specified by parameters IP11-IP14) defines a portion of an 
ECS file which is copied into CM before processing under the control of 
the subprocess is initiated and when this processing stops, is copied 
back into the ECS file from which it came, thereby (possibly) altering the 
content of the ECS file. The second map entry, however, defines a section 
of an ECS file which is read into CM only, and will never be copied back 
into ECS, thus protecting the ECS file from being altered. The parameters 
include the C-list index of the associated ECS File(s), the addresses in 
the file(s) and in CM between which the information is to be transferred 
(swapped) and the number of words to be swapped. 

The new process, after being constructed, is scheduled to run and will 
begin execution at the entry point of the initial process. 



Possible errors while creating a process: 

Class £ Modifier Description 

Allocation block does not exit 

No ECS available 

No money available 

C-list index is negative 

C-list index is too large 

Number of chaining words <^ 

Number of chaining words too large 

Number of stack entries < 1 

Number of map entries < 2 

Compiled map buffer size is negative 

Length of local address space is negative 

Length of local address space is too large 

Subprocess entry point < 2 

Subprocess entry point exceeds field lergth 

File address is negative 

File address is too large 

CM address is negative 

CM address exceeds field length 

Word count for map entry < 

Word count for map entry too large 

D. Display Fixed L ength Descriptor of a Process 

IPl C: Capability for the process 
IP2 D: Address of buffer area 
IP3 D: Size of buffer area 

The fixed length process descriptor contains much of the information neces- 
sary to maintain and run a process (see Figure 9). It is divided into two 
sections: the read only descriptor and the read/write descriptor. The read 
only descriptor shows the state flags of the process, the length of the 
process, the length of the variable length descriptoi and the clock times 
consumed by the user, the system and in swapping, respectively. The read/ 
write portion of the fixed length descriptor contains the process exchange 
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jump package as well as data and pointers used to maintain portions of the 
variable length process descriptor: the full C-list table, call stack, 
the subprocess descriptor table, logical map and error selection mask (ESM) 
storage, and compiled map storage. 

In order to display the fixed length process descriptor, the user supplies 
the index for the capability for the process whose fixed length descriptor 
is desired, an address within the user's FL where the information will be 
displayed and the length of this area which, to hold all the information, 
should be 23 words long. The system will copy as much of the fixed length 
process descriptor into this user area as there is room for. The informa- 
tion has thp format pivpn bplnw in Fi Piirp Q. 

Possible errors: 

Class # Description 

2 2 Address is negative 

2 3 Address exceeds user's FL 

2 Length of area <_ 

2 1 Address plus length exceeds user's FL 

Figure 9 Display of Fixed Length Process Descriptor 
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Process State Flags 

Eight flags describe the state of the process. These stat e flags are used 
primarily to control the swapper, but are set and checked by other routines 
(event channel, process interrupt, and destroy process). The eight flags 
function as follows: 

The E flag indicates that the process is actually a pseudo-process 
and is used by the event channel routines to distinguish 
between genuine and pseudo-processes. 

Tiic in core flag, C, is set whenever the process is actually rumiiag 
on the CPU. This flag is checked by the process interrupt 
routine. 

The "pending action" flag, P, directs the swapper to interrogate the 
"W", "I", "D" amd "V" flags. These four flags cause the 
swapper to: 
W - (the wakeup waiting flag) unchain the process flow from the 

event channels ; 
I - check the "ancestors" of the current subprocess for an inter- 
rupt process; 
D - destroy the process; and 

V - modify the swapper return because of the arrival of an event 
for the process. 

The "running flag", R, indicates that the process is scheduled to run 

or is running on the CPU. The running flag (R) and the wake- 
up waiting flag (W) interact in the event channel routines 
as well as in the process interrupt routines. They are used 
to permit the process to "hang" on several event channels and 
still be able to accept an incoming event. 
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E. Display clock times 

IPl D: Address of buffer area in user's FL ' 

The current times on the following five clocks: real clock, user clock, 
system clock, swapping clock, and quantum clock, are displayed in con- 
secutive words beginning at the address supplied by the user. The buf- 
fer area should be at least five words long since this action causes 5 
words to be passed. 

Possible errors while displaying clock times: 

Description 

Buffer address is negative 

Buffer address plus 5 exceeds user's FL 

F. Creating a Subprocess 

IPl C: New subprocess class code (OB.SONSP) 

IP2 C: Class code of the "father" of the subprocess (OB.FATHR) 

IP3 D: Number of map entries 

IP4 D: Compiled map buffer size 

IPS D: Subprocess FL 

IP6 D: Subprocess entry point 

IP7 C: Subprocess local C-list index (OB.LOCCL) 

The action of creating a subprocess involves constructing the 8 word sub- 
process descriptor. The narameters are similar to those required to create 
the initial subprocess except for IP2 and the absence of logical map entry 
parameters. The subprocesses in a process are organized in a tree struc- 
ture in which each subprocess "points" only to its predecessor (''father") 
(see Figure 10). For each subprocess, the term "ancestors" refers to the 
sequence of subprocesses which starts with the subprocess and terminates 
with the root of the subprocess tree. Note that a subprocess is always 
an "ancestor" of itself. The term "son" of a subprocess refers to any 
of the subprocesses for which that subprocess is the "father". 

Each newly created subprocess is linked into the subprocess tree at the 
subprocess referenced by IP2. Note that since no map entries are made for 
the subprocess at the time of its creation, they must be constructed via 
the appropriate system actions in order to provide executable code and a 
data area for the subprocess, before the subprocess can be used. Note also 
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that since the first few cells of the subprocess address space are used 
for storing the parameters of subprocess calls, they should be given a 
read/write map entry. 



Possible errors while creating a subprocess : 
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Description 

Allocation block does not exist 

No ECS available 



Duplicate subprocess name (same as some other 
subprocess in the process) 

"Father" does not exist 

Number of map entries _< 

Number of map entries exceeds field length 

Compiled map buffer size is negative 

Subprocess field length < 

Subprocess field length is too large 

Entry point < 2 

Entry point > FL 

No space for compiled map 

C-list does not exist 

Process becomes too big for CM size of machine 



Figure 10 Subprocess Tree 
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G. Display Subprocess descriptor 

IPl C: Capability for class code (subprocess name) 
IP2 D: Address of buffer area 



This action allows the user to display a subprocess descriptor in a designated 
area within his own FL (see Figure 11). The system copies the subprocess 
descriptor into the user's area' starting at the address specified by the 
second parameter and ending either with the last word of the displayed sub- 
process descriptor (7 words) or the last word of the buffer area, whichever 
comes first. The contents of the subprocess descriptor are described above 
(p. 24). 

Possible errors: 

Descriptor 

Subprocess does not exist 

Address is negative 

Address exceeds user's FL 

Length of buffer area £ 

Length of buffer area too large 
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Figure 11 Display of Subprocess Descriptor 
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H. Subprocess Call 

A normal subprocess call is initiated by calling on the system in the 
usual manner, using an operation whose action is "subprocess call". A 
normal subprocess call may also be initiated as the result of F-return 
action under the control of a multi-ordered operation (see p. 4 above). 
A new processing environment is established (described below) as a result 
of the transfer of control to a different subprocess. At any given time, 
there are two distinguished subprocesses within a subprocess. They are 
the current subprocess and the end-of-path subprocess. (Note that the cur- 
rent subprocess is always an "ancestor" of the end-of-path subprocess.) 
The sequence of subprocesses from the end-of-path to the current subprocess 
(inclusive) is called the full path . The end-of-path is defined dynamically 
by the flow of control among the subprocesses. The current s ubprocess may 
be considered to be the subprocess currently in control. The end-of-path 
and current subprocesses are reassigned whenever a new subprocess is called. 
The subprocess being called (the callee ) becomes the new current subprocess. 
If the callee is an "ancestor" of the old end-of-path, the end-of-path re- 
mains unchanged. If the callee is not an "ancestor" of the end-of-path, 
the new end-of-path becomes the same as the callee (i.e., the full path 
consists of a single subprocess - the callee). See Figure 12. 

The full path determines the sphere of protection invoked by the current 
subprocess by defining the full C-list, full map, and full address space. 
The access afforded the current process to other objects within the sys- 
tem is controlled by the full C-list. The full map determines the config- 
uration of the address space available to the current subprocess and the 
full address space is the size of the address space available to the current 
subprocess. The configuration of the subprocess tree defines the static 
relationship between the subprocesses (subprocesses closer to the root may 
be given the privileges of their descendents) while the full path dynamically 
controls the boundaries of access applied to the current subprocess. This 
system of controlling the bounds of protection allows the construction of 
processes which may exercise varying degrees of protection while maintaining 
synchronization between the subprocesses involved. 



Figure 12 Full Path Example using Tree in Figure 10 
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A subprocess call also causes a new stack entry to be constructed and 
placed on the call stack. Stack entries are used to re-establish the 
coLiecL processing environment during subprocess returns. Cells U and 
1 of the full address space are zeroed (these cells are used by the hard- 
ware Arith Error mechanisms and to simulate SCOPE system calls). In addi- 
tion, if the calling subprocess is a member of the new full path, the ori- 
gins (relative to the new environment) of the address space, C-list, and 
map of the calling subprocess are computed and stored in cells 2,3, and 4 
of the new address space. If the calling subprocess is not a member of 
the new full path, then these cells are zeroed. The parameters of the 
subprocess call are copied to the new address space starting in cell 5. 

For a normal call the parameters of the call are first formatted in the 
actual parameter area of the process descriptor by the system entry mechanism. 
These parameters are drawn from the calling subprocess input parameter list 
(IP list) under the direction of the operation being used for the subprocess 
call (IPO). In addition to formatting the actual parameter list, the system 
entry routine places the name (class code) of the called subprocess, the 
number of parameters, and a bit string denoting the types (capability or 
datum) of the parameters at the end of the actual parameter area. After 
establishing the correct processing environment for the called subprocess, 
the parameters are transferred to the local address space and local C-list 
of the called subprocess. Datum parameters are simply copied to the next 
parameter cell in the local address space. Capability parameters are 
copied to successive positions in the local C-list and the index of 
the parameter in the local C-list is stored in the next parameter cell 
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in the local address space. On the completion of the parameter passing, 
execution is initiated at the entry point of the called subprocess. 

Possible errors during subprocess call: 

Description 

Named subprocess does not exist 

No room on stack for subprocess 

No room for parameters 

Too many capability parameters 

Local C-list does not exist 

Subprocess Return 

Like the subprocess call, the subprocess return must construct a new pro- 
cessing environment before returning control to the user. The return rou- 
tines reactivate a subprocess using information left in a stack entry . The 
full path recorded in the stack entry is sufficient to reconstruct the pro- 
cessing environment. The P-counter from the stack entry controls where 
in the subprocess execution is re-initiated. The normal return causes the 
P-counter to be modified by adding the low order 18 bits of the CEJ instruc- 
tion which originally caused control to pass to another subprocess. (See 
p. 1 above.) 

Possible errors during subprocess return: 

Class jl_ Description 

4 9 Stack empty 

2 2 P-counter < 

2 3 P-counter exceeds field length 

Subprocess F-return 

A subprocess (or the system) may initiate an F-return whenever F-return 
processing is appropriate. F- return processing causes the operation which 
called the subprocess (system) to be re-examined for additional actions 
(see Requesting a System Action). The operation is located (after re-esta- 
blishing the processing environment of the previous subprocess) by using 
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the "last IP list pointer" stored in the stack entry for the previous sub- 
prccess • xj. i-ne r "^re t-iirn couiiL \ajL5c savcu xn une stacicj xs nou eGiiax to 
the ntimber of orders in the original operation, the F-return count is 
incremented and the next order of the operation is processed. (Note that 
the action of all orders other than the first is "subprocess call" or 
"subprocess jump".) Otherwise, control returns to the subprocess which 
originally called the operation, but the P-counter of that subprocess is 
not incremented as it is for the normal return. 

Possible errors during a subprocess F-return: 

Description 

Stack empty 

IPO is not a capability for an operation 

Operation does not exist 

IP list is too big 

I. Subprocess Jump Return 

IPl C: Capability for class code for subprocess to return to (OB.SPRET) 
IP2 D: Number of stack occurrences of IPl to skip (0=1, -l=down to last) 

The subprocess jump return provides a method for getping calls off of the 
process call stack. The user specifies the class code for the subprocess to 
which the return is to be made. In addition, he indicates the number of 
occurrences of that subprocess in the call stack which should be skipped 
in looking for the call which is to become the new top of the stack. Zero 
indicates the first (most recent) call whereas -1 indicates the last (earliest) 
call. Upon finding the proper stack entry, the stack is reduced to make 
that entry the top of stack and normal subprocess return action is initiated. 

J. Return with Error 

IPl D: Error class 
IP2 D: Error number 

The subprocess which requests this action will be removed from the top of 
the call stack and error processing for the error designated by the two 
parameters will be initiated. 



Possible error 

Class £ Description 

10 No subprocess to handle error 

K. Modify P-counter of subprocess 

IPl C: Capability for class code for subprocess (OB.PCNT) 
IP2 D: Number of stack, occurrences of IPl to skip 
IP3 D: New P-counter . 

The user can modify the P-counter in a subprocess which has already been 
called by identifying the subprocess, the number of stack occurrences of 
the subprocess to skip \t>iie H above) and the new P-counter. The F-counter 
is modified in the stack and the new P-counter will be used the next time 
that entry becomes the top of the stack. If the caller attempts to modify 
his own P-counter, an F-return is made. 

Possible errors while modifying the P-counter: 

Class £ Description 

2 2 P-counter is negative 

2 3 P-counter exceeds user's FL 



L. Display Stack 

IPl D: CM address of a buffer area 
IP2 D: Size of buffer area (>_ 4) 

The user may examine the call stack of a process. He must supply the address 
of a buffer area and its length so that the system can copy the stack into 
the specified area. The number of entries in the stack is stored in the 
first word of the buffer. As many entries as possible starting with the 
current top of stack are then copied into succeeding 3 word sections of 
the buffer. The stack entries are reformatted. 



Word 
Word 1 

Word 2 



Capability for class code for current subprocess 
Capability for class code for end-of-path subprocess 

17 
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Forced\ 
F-return flas '\ 



F-return 
count 



IP LIST 
Address 



P-counter 



Interrupt 
flag 



Interrupt 
inhibit flag 
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Possible errors while displaying stack: 



Class 


£ 


Modifier 


2 


2 


1 


2 


3 


1 


2 





2 


2 


1 


2 



Description 

CM address negative 

CM address exceeds user's FL 

Size of buffer area < 4 

CM address + size of buffer area exceeds 

user's FL 



M. Display Stack Entry 

IPl D: CM address of buffer 
IP2 D: Desired stack entry 

A particular entry in the call stack of a process can be examined if the 
system is supplied with the CM address of a buffer area (each entry is 3 
words long) and the index (relative to the top of the stack) of the desired 
stack entry. Format same as in L above. 

Possible errors while displaying a stack entry: 

Description 

CM address is negative 

CM address exceeds user's FL 

Stack entry pointer negative 

Stack entry pointer exceeds stack 

CM address plus 3 exceeds user's FL 



IPl C: A process (OB.SDINT) 

IP2 C: Capability for class code for a subprocess (OB.INTSP) 

IP3 D: An 18 bit interrupt datum 

The process interrupt is one of the two ways in which a running process may 
effect the execution of another process (the other is via an event channel) . 
The process interrupt enables one process to force the calling of a specified 
subprocess (IP2) (called the interrupt subprocess ) within another process 
(IPI) (called the interrupted process ); i.e., the first process forces the 
interrupted process to call the interrupt subp rocess. However, the inter- 



Class 
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i 


Modifier 


2 




2 




1 


2 




3 




1 


2 




2 




2 


2 




3 




2 


2 




1 




2 


N. 


Send 


Pro 


cess 


Interrupt 
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rupt is given a "priority" in that the interrupt subprocess will not be. 

that is, of the subprocess which is actually executing in the interrupted 
process at the time of the call (or thereafter). Therefore, how soon the 
interrupt subprocess gets entered depends upon its position in the sub- 
process tree and the flow of control in the interrupted process. An 18- 
bit interrupt datum (IP3) is passed as the parameter of the call of the 
interrupt subprocess. Once a subprocess becomes an interrupt subprocess, 
and until that subprocess is called as an interrupt subprocess, all sub- 
sequent interrupts to that subprocess are disabled (have no effect). 

The disposition of the interrupt is returned to the user in X7. 

X7 = Interrupt sent and interrupted process is running 
X7 = 1 Interrupt process currently "in core" of another CPU 

(Best to try again) 
X7 = 2 Interrupt subprocess is already an interrupt subprocess 
X7 = 3 Interrupt sent but interrupted process is not running 

Since each subprocess is technically its own ancestor, it is necessary when 
an interrupt subprocess is called to automatically i nhibit interrupts for 
the current (= interrupt) subprocess. When interrupts are inhibited for 
a subprocess, an interrupt to the subprocess will be remembered but cannot 
cause the interrupt subprocess call as long as the interrupt inhibit is set 
and the subprocess in question is the current subprocess. 

At every normal subprocess call and return, a check is made for waiting 
interrupt subprocesses (subprocesses for which a process interrupt has 
been issued but which have not yet happened to be the ancestor of any cur- 
rent subprocess). If any interrupt subprocesses are waiting, the ancestors 
of the new current subprocess are checked to see if any of them is an inter- 
rupt subprocess. If so, the interrupt subprocess is called. Execution in 
the interrupt subprocess begins two words before its normal entry point. 
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Possible errors while sending a process interrupt: 



oxdoo 7r iiuuij-iei- L/e&i-L xlilxuIi 



5 3 Process does not exist 

4 5 Subprocess does not exist in designated process 

2 13 Interrupt datum exceeds 18 bits 

0. Set/Clear Interrupt Inhibit of Current Subprocess 

These parameterless action(s) allow the user to clear the interrupt inhibit 
flag which is normally in effect for the current subprocess if it was called 
as an interrupt subprocess. The interrupt inhibit flag can also be reset 
once it has been cleared. 

Possible errors: 
None. 



P. Reduce/Restore Path of Current Subprocess 

No parameters . 

The user may reduce the path of the current subprocess, i.e., the chain of 
subprocesses from the root of the path to the current subprocess, so that 
it consists of just one subprocess, the current subprocess itself. Once 
the path has been reduced, it may be restored again using this action. 

There are no possible errors. 

Q. Set Local ESM (Error Selection Mask) 

IPl D: Pointer to new ESM 

The error selection mask, which determines which classes of errors a sub- 
process can handle, may be set in the current subprocess by specifying a 
poiater to the new ESM. The ESM is a bit string (32 bits per word) in 
which a 1 indicates acceptance of the corresponding error class; i.e., 
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Krror class Error class 31 
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Possible errors while setting local ESM: 



oxaas 


£_ 


noQxixer 


2 


2 


1 


2 


3 


1 



description 
Pointer to ESM < 
Pointer to ESM > FL 



R. Set ESM in any subprocess 

IPl D: Pointer to new ESM 

IP2 C: Capability for class code (subprocess name) (OB.STESM) 

By specifying the name (class code) of a subprocess in addition to a pointer 
to a new ESM, the Error Selection Mask for any given subprocess may be reset. 

Possible errors while setting ESM in any subprocess: 

Class #^ Modifier Description 

4 5 Subprocess does not exist 
2 2 1 Pointer to ESM < 

2 3 1 Pointer to ESM > FL 

S. Destr oy Process 

IPl C: Capability for process to be destroyed (OB.DSTRY) 

The system action of destroying a process requires only a parameter giving 
the C-list index of the process which is to be deleted. The process will 
be removed from any event channels on which it is waiting and its address 
space in ECS released. 

Possible error while destroying a process: 

Class #_ Description 

5 3 Process does not exist 

T. Destroy a Subprocess 

IPl C: Capability for class code of subprocess to be destroyed (OB.DSTRY) 

A subprocess can be destroyed if it is currently a leaf of the subprocess 
tree; otherwise an F-return will be made. If the subprocess is in the call 
stack, an error is generated. 



40 



Possible errors while destroying a subprocess: 

Description 

Subprocess does not exist 

Attempt to delete subprocess in stack 

Attempt to delete root of a subprocess tree 

Subprocess is pointed to by another subprocess 



Class 


I 


4 


5 


4 


11 


4 


11 


4 
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U. Save (Restore) Registers 

IPl D: Pointer to 16 word buffer for registers 

The exchange jump package for a process can be saved in (restored from) 
the user's area if a pointer to a 16 word buffer is specified. When the 
registers are restored, only the programmable registers (A,B and X) are 
restored. 

Possible errors while saving (restoring) registers: 

Class jl_ Description 

2 2 Pointer to buffer is negative 

2 3 Pointer to buffer is too large (within 16 words of user's FL) 

Map Actions 

Associated with each subprocess is a map which directs the swapping of the 
subprocess address space between Central Memory and ECS files. A map con- 
sists of a fixed length sequence of map entries each of which is either 
zero or contains a swapping directive. The user may zero or change a map 
entry, and may display an entry from the full map or from the map associated 
with any given subprocess. A swapping directive consists of 1) an ECS file, 
2) a file address, 3) a central memory address, 4) a word count, and 5) a 
read-only flag. Thus the map indicates what portions of which files are 
copied to/from specified portions of the subprocess space at the beginning/ 
end of processing. 
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When swapping a subprocess, the entries in the logical map (see Figure 6) 
are processed in the order of their appearance. To speed up the swapping 
process, the entries of the logical map are "compiled" to absolute ECS 
and CM addresses. Each file data block carries a count of all logical 
map entries which reference it. This "reference count" is important 
since the absolute ECS addresses associated with the "compiled" map (see 
Figure 7) are sensitive to 1) garbage collections and 2) deletion of data 
blocks. Before any of the swapping directives in a map are executed, the 
■'local garbage collection count" is compared to the "global garbage col- 
lection count". If they do not match, the map must be recompiled since 
some file block may have been moved in ECS. 

A. Zero a Map Entry 

IPl C: Capability for class code (subprocess name) (OB. CHAMP) 
IPz D; Index in logical map of the subprocess 

When zeroing a map entry, the user specifies the name of the subprocess 
(class code) whose map entry is to be zeroed, and the index of the entry 
in the subprocess logical map. If the map is part of full map and if it 
is a read/write entry, then that area is swapped out before the entry is 
zeroed. The result is that when the subprocess address space is swapped 
between ECS and Central Memory, the portion of the address space formerly 
referenced by the zeroed entry will not be swapped. 

Possible errors while zeroing a map entry: 

Description 

Subprocess does not exist 

Negative map index 

Map index exceeds map length 

Attempt to change or zero DAE (Direct Access 

Entry) 

Change (create) a map entry (read/wri te or read o nly) 

IPl C: Class code of subprocess whose entry is to be changed (OB.CILMAP) 

IP2 D: Index of entry in logical map of subprocess 

IP3 C: Associated file (read only: OB.PLMAP, OB.RDFIL; 

f OB.PLMAP 
read/write: -^ OB.RDFIL 

1 OB.WFILE 
IP4 D: Address in file 



Class 
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Modifier 
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5 
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2 
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2 
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IPS D: Address in CM 

IP6 D: Word count of new entry 



When a map entry is changed, care must be taken if the map involved is 
part of the full map. In this case, the same procedure must be followed 
as in zeroing a map entry. The new entry is then constructed and swapped 
in. Note that overlapping map entries will behave oddly since the portions 
swapped under one map entry may be partially or completely overwritten by 
the information swapped under a subsequent map entry. 

Possible errors while changing a map entry: 

Description 

Subprocess does not exist 

Negative map index 

Map index exceeds map length 

Missing block encountered 

Buffer full 

Negative file address 

Negative word count 

File address + word count exceeds file size 

CM address + word count exceeds field length 

C. Display a Map Entry from the Map of a Named Subp rocess 

IPl C: Class code of subprocess whose entry is to be displayed 
IP2 D: Index of entry in logical map of subprocess 
IP3 D: Address of a 3 word buffer 

This action will insert into the 3 word buffer area (.IP3) the current 
contents of the indicated map entry of the subprocess specified. Note 
that the length of the map (maximum for IP2) can be obtained by using 
the Display Subprocess Descriptor action. The three words of the designated 
map (see Figure 6) are copied to the specified buffer. 

Possible errors while displaying a map entry: 

Description 

Subprocess does not exist 

Negative address for buffer 

Buffer address + 3 exceeds user's FL 

Negative map index 
Map index too large 
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Figure 6 Logical Map 
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ai. 



< file > or < empty > 

< file address > 



<Direct 
Access Entry 
Flag> 



l<COfl?ll£PIR>l<CM ADDR>i <WD CNT> 



-0 



"^ 



//■ 
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Denotes an "empty" map entry 

18 



< file > ::= ! UNIQU E NAM E 

< file address > : 



!>,' 



MOT INDEX 



file identification 



->- 2^° -1 



< K/0 FLAG > ::=!=* read only; ^ read/write 

< compile ptr > ::= index in compiled map buffer of first compiled map 

entry for this swapping directive 

< CM ADDR > : := CM address within subprocess local address space 

< WD CNT > ::= word count 

Note: < CM ADDR > + < WD CNT > < length of subprocess local 

address space 

< DAE Flag > ::= 1 — this is a direct ECS access entry (Legal only for first 

entry) 
— regular map entry 
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Figure 7 Compiled Map 



;<SPACE> !<COUNT> 



E<ECS ADDRXCM ADDRXWD CNT> 



K<ECS ADDR><CM ADDRXWD CNT> 



<K/U J:'LAG>__^.-*^j- 
<DAE Flag> '' ^' 
<LAST ENTRY> ' ' 



y 



11^ ECS ADDR>< CM ADD R?j<WD CNT> | 



PREFIX 



S- Compiled map words 



END 



< COUNT > 



,_ j =* must recompile 

l>0 =* map is good if same as GARBCNT 



< SPACE > : := number of un-used words in the compiled map buffer 

< W> CNT > : := number of words to transfer 

< CM ADDR > ::= CM address relative to CM process origin (Bl) 

< ECS ADDR > ::= absolute ECS address to start transfer 



< R/0 flag > ::= read only f lag ^ 



fc 



=*• read/write 



Vl ^ read only 

< DAE flag > ::= 1 — DAE (legal only on 1st entry in compiled map) 

< last entry > : := 1 — last compiled map word corresponding to a particular 

swapping directive 
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D. Display Entry in Full Map 

IPl D: Index of entry in full map 
IP2 D: Address of a 3 word buffer 

The maps of the subprocesses in the full path are concatenated to form 
the full map in much the same way as the full C-list is formed. An entry 
in the full map can be displayed if the index of the entry in the. full 
map is given along with the address of a buffer where the entry should be 
"displayed". The format of the display entry is the same as for named 
subprocess version of Display Map Entry. 

Possible errors in display ■ entry in full map: 

Description 

Index of entry too large (exceeds length of 
full map) 

Index of entry negative 

Pointer to buffer negative 

Pointer to buffer + 3 greater than user's FL 

Direct User Access to ECS 

To afford the user an ECS RA and FL so that he may access an often used 
segment of ECS directly, the system permits the current subprocess to have 
a single direct access entry (DAE). This DAE must be the first entry in 
the logical map; it may reference only one file block (due to obvious 
physical limitations), and is set and cleared via two special actions 
described below. A DAE map entry has only two features which distinguish 
it from other map entries: 1) the CM address portion is always zero, and 
2) the DAE flag (in first entry only) is set. 

E. Set Direct Access Map Entry 

IPl C: Capability for class code (OB. DAE) 

IP2 C: File (OB.FDAE) 

IP3 D: File address of beginning of block 

IP4 D: IJord count (mod 100„) 

o 

This action sets the direct access ECS entry in the map of the subprocess 

named by the first parameter. The file address must be the beginning of 

a block and the word count must be a multiple of 64 words since storage 

handling in ECS is in 64 word blocks. 
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Possible errors while setting a DAE: 

Class £_ Modifier Description 

2 2 File address negative 

2 3 File is too large 

11 1 Word count extends to more than 1 block 

2 Word count negative 

F. Clear the Direct Access Map Entry 

IPl C: Capability for class code (OB.CHMAP) 

This action clears the direct access entry in the map of a named sub- 
process. The only parameter required is a class code (iPl). The action 
is equivalent to A. above except that it may only be used on DAE's. 

Possible errors while clearing DAE: 

Class _# Modifier Description 

4 5 Subprocess does not exist 

11 2 Attempt to zero swapping directive 

VI Event Channel Actions 

Event channels are ECS objects which are used to synchronize the behavior of 
running processes as well as to implement "block" and "wake-up" mechanisms. 
Events consist of two 60 bit words: the first identifies the sending process; 
the second is a 60-bit datum. Each event channel should handle a particular 
kind of event. The user can create an event channel, send an event, get an 
event from an event channel, get an event from any one of a list of event 
channels, and destroy an event channel. If the user attempts to get an event 
from a channel which has no events, the user's process is either blocked (stops 
running) until some other process sends an event to the event channel, or 
F-return action is initiated. 
A. Create an Event Channe l 

IPl C: Capability for allocation block (OB.CREEC) 
IP2 D: C-list index for new event channel capability 
IP3 D: Number of events that queue can hold 

When an event channel is created it consists of a three word header and an 
event queue which is initially empty. The header word is used to maintain 



the queue of events and a queue of waiting processes, which develops if 
the queue of events becomes empty and processes request events from that 
channel. When creating an event channel, the user specifies the name 
of the Allocation block which funds the ECS space occupied by the event 
channel, a C-list index where the system can put the capability (with all 
options allowed) for the event channel when it creates it, and the length 
(number of possible events) of the event queue. 

Possible errors while creating an event channel: 

Class £_ Description 

6 Allocation block does not exist 

6 1 No ECS available 

6 2 No money available 

2 4 C-list index is negative 

2 5 C-list index exceeds full C-list 

9 Length of event queue <_ 

9 1 Event queue too large 

B . Send an Event (with/without duplicate event check ing) 

IPl C: Capability for the event channel (OB.SNDEV) 
IP2 D: Datum part of event 

These actions allow the user to send an event to an event channel. He 
specifies the index of the capability for the event channel and specifies 
a 60-bit datura to be passed with the event. The system responds by indi- 
cating the disposition of the event to the user in X6 . The following res- 
ponses are possible: 

Condition Response 

Event put in event queue 1 

Event passed to a process 2 

"YOU LOSE" event put in event queue 3 
Event queue full 4 

Duplicate event found 5 

The first response indicates that all went well, and there was no pro- 
cess a waiting an event in the process queue. The second response indi- 
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cates that there was a process waiting in the queue and that it was 
Dassed the event = The third response indicates that there was only 
one free slot in the event queue (an event occupies two words) ; the 
intended datum has been replaced by a "you lose" datum (-0) so that the 
process which ultimately gets the datum will be aware that the event 
queue was full and that information was lost. 

The fourth response indicates that no action was taken because the queue 
was full. The fifth response is returned only if the action called for 
a search for duplicate events and a duplicate was found, in which case 
no further action is taken. 

Possible errors resulting from sending an event: 

Class £ Description 

9 2 Event channel does not exist 

C. Get an event or hang 

IPl C: Capability for event channel (OB.GETEV) 

A user requests an event from a channel using the C-list index of the 
capability of the channel in question. If the event queue is empty, the 
process must wait ("hang" or "block") until an event arrives before resuming 
execution. If more than one process is awaiting an event, the first event 
sent to that channel is passed to the first process while the other pro- 
cess (es) continues to wait. The event is returned to the calling process 
in X6 and X7. X6 contains the unique name of the process which sent the 
event while X7 contains the event datum. 

Possible error while getting an event: 

Class £ Description 

9 2 Event channel does not exist 

D. Get an Event or F-return 

IPl C: Capability for event channel (OB.GTEVF) 

The user requests an event from a channel using the C-lisL index of the 
event channel's capability. If the event queue is empty, an F-return 
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will be initiated in order to permit the process to take alternative 
actions The event is rptijrrseH iv. Yf-. snA y? =!c; -:t-. r' -.1-..-,,,,-. 

Possible error while getting an event: 

Class i[ Description 

9 2 Event channel does not exist 

E. Get an even t fr om one of a list of event channels o r hang (F-return) 

IPl D: Pointer to list of C-list indices for event channels (OB.SNDEV. . . ) 
IP2 D: Number of event channels involved (OB.GETEV or OB.GTEVF...) 

The procedure for getting an event from one of a list of event channels 
is similar to that for getting a single event (see C. above). The channels 
are interrogated one at a time and if their respective event queue is empty, 
the user's process will be queued on the process queue of the event channel. 
If an event subsequently arrives or is discovered on one of the event chan- 
nels in the list, the process is removed from all the process queues on 
which it has already been chained and it is passed the event. If no event 
arrives or is discovered before the last event channel is interrogated, 
the process must wait ("hang" or "block") until an event arrives on one 
of the event channel (F-return) . 

When an event is finally passed in X6 and X7, the index in the user's list 
of the event channel producing the event is masked into bits 0-18 of X6. 

Possible errors while getting an event from a list of channels: 

Class £ Modifier Description 

9 2 Event channel does not exist 

2 Number of channels is negative 

2 12 Number of channels exceeds the number of 

chaining words in the process 

2 2 Pointer to list of event channel indices is 

negative 

2 11 Pointer to list + number of channels exceeds FL 



F. Destroy an Event Channel 

IPl C: Capability for event channel (OB.DSTRY) 

An event channel can be destroyed. The only parameter required is the 
C-list index of the event channel which is to be destroyed. If there 
are any processes waiting on the event channel's process queue, an F- 
return is initiated leaving the event channel intact. 

Possible errors while destroying ari event channel; 

Class £ Description 

9 2 Event channel does not exist 

Vl I Operations 

Operations are ECS objects which direct the transfer of control from the 
user to the system when the user calls upon the system. They describe 
the actions to be taken by the system and direct the passing of parameters 
to the system or between user subprocesses. (See Subprocesses above.) 
Each operation is composed of an initial order specifying a desired action, 
some parameter checking information, and when the action is "subprocess 
call", a class code naming the subprocess to be called. The initial order 
is followed optionally by a sequence of orders (containing similar informa- 
tion) indicating alternative actions should all the preceding orders result 
in F-returns. The user may invoke any of the ECS. system actions described 
in this document, or can create his own operations of which the orders may 
either specify subprocess call or jump actions or actions which are modi- 
fications of ECS system actions. 

The checking information in each order consists of 1) a parameter speci- 
fication type for each parameter required in the actual parameter list 
for the indicated action; 2) words containing the required option bits and 
type for capability parameters to be supplied by the user; and 3) all fixed 
parameters, whether capabilities or data. This checking information is 
used by the system entry/exit routines when constructing the actual 
parameter list. 



The parameter specification types are: 



Tx£e 
none 



any capability 

user-supplied capability 

user-supplied datum 
fixed capability 

fixed datum 



Description 

when an operation is created, all parameter 
specifications are initialized to "none", 
and must be fixed-up using the various actions 
supplied before the operation may be used. 

a capability is expected from the user, but 
no type or option checking is to be performed 
on it. 

the user must supply a capability whose type 
and option bits include those set in the 
operation. 

the user must supply a 60-bit datum but no 
checking is performed on it. 

both words of a capability are stored in the 
operation and no corresponding information is 
taken from the user's input parameter list. 

a 60-bit datum word is stored in the operation; 
it is passed to the actual parameter list 
unchanged . 



There are two actions for creating new operations; the first creates an 
operation with one order to "call" or "jump-call" a designated subprocess 
and the second creates an operation of order N by adding one order to 
"call" or "jump-call" a subprocess to an already existing operation of 
N-1 orders. All operations constructed by the user specify "subprocess 
call" actions or are modified versions of already existing actions. Actions 
are also available for copying an operation and for changing the parameter 
specifications in an operation. 

A . Make a subprocess call or subprocess jump operatio n 

IPl C: Capability for Allocation block (OB.ALORD) 

IP2 D: C-list index for new operation 

IP3 0: Type (0=call; nonzero=jump) 

IP4 C: Class code of subprocess to be called by the new operation 

(OB.CALOP) 
IP5 D: Number of parameters to be used by the subprocess call 
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To create a new operation to be used for subprocess call or jump call, 
the user supplies the index of a capability for the Allocation block, 
which is to fund space in ECS for the new operation. 

In addition the user gives 1) the C-list index where the system will 
place the capability for the new operation, 2) the type subprocess call 
action (call or jump call) of the new operation, 3) the name (class code) 
of the subprocess to be called by the operation, and 4) the number of 
parameter specifications needed for the subprocess call. Upon creation, 
all of the parameter specifications of the new operation are initialized 
to "none" and therefore the operation may not yet be invoked (unless it 
is parameterless) . 

Possible errors while creating a new operation: 

Class jl Description 

6 Allocation block does not exist 

6 1 No ECS available 

6 2 No money available 

2 Number of parameter specifications is negative 

7 7 Too many parameters 

2 4 Negative C-list index 
7 6 Order too large 

B. Add an Order to an Operation 

IPl C: Capability for Allocation block (OB.ALORD) 

IP2 D: C-list index for new operation (order) 

IP3 C: Capability for existing operation (OB.ADDOR) 

IP4 D: Type of order (0=call; nonzero=jump) 

IP5 C: Class code of subprocess called by the new order (OB.CALOP) 

IP6 D: Number of new parameters being added 

This action creates a new operation of order N out of an operation of 
order N-1. The first parameter is the C-list index for the Allocation 
block which is to fund space in ECS for the new operation; the second 
parameter is the C-list index where the system will put the capability 
for the new operatipn. In the third parameter the user specifies an 
already existing operation of order N-1, which is copied with the new 
order appended. The last three parameters describe the new order by indi- 
cating whether it is a "call" or "jump call" to a subprocess, the name 



(class code) of the subprocess to be called, and the number of additional 
parameters. The parameters of the new order will be initialized to type 
"none" and must be fixed-up before the new order of the operation is used. 

Possible errors while adding an order; 

Class §_ Description 

6 Allocation block does not exist 

6 1 No ECS available 

6 2 No money available 

2 4 C-list index is negative 

2 5 C-list index is too large 

7 1 Operation has been deleted (doesn't exist) 
4 5 Subprocess does not exist 

2 Number of parameter specifications is negative 
2 1 Number of parameter specifications is too large 
7 6 Order too large 

C. Copy an operation of order n 

IPl C: Capability for Allocation block (OB.ALORD) 
IP2 D: Full C-list index for new operation 
IP3 C: Operation to copy (OB.ADDOR) 

The user can copy an already existing operation of order n (n >^ 0) by 
specifying the C-list index of the funding Allocation block, the full 
C-list index for the desired operation, and the full C-list index of a 
slot for the capability for the new copy of the operation. This action 
is used prior to fixing parameter specifications of an operation to avoid 
changing the original version of the operation. 

Possible errors while copying an operation: 

Description 

Allocation block does not exist 

No ECS available 

No money available 

C-list index is negative 

C-list index exceeds full C-list 

Operation does not exist 



Class 


# 


6 





6 


1 


6 


2 


2 


4 


2 


5 


7 


1 



D. Change a parameter specification type 

In order to specify the parameter specification types in an order of an 
operation created by either A or B above, a set of actions is provided. 
Each takes as parameters a C-list index for an operation and a para- 
meter specification index (considering the parameter specification for 
the first parameter of the first order as having an index of 0). Some 
require additional information depending on the type of parameter spe- 
cification being changed. 

1. Change parameter specification from "none" to "user-supplied datura" 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification to change 



Description 

Operation does not exist 

Index is negative 

Index is too large 

Parameter specification type is not currently "none" 

2. Change parameter specification from "none" to "any capability" 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification to change 

Possible errors. See 1 above. 

3 . Change parameter specification type from "none" to "user-supplied 
capability " 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification type 

I1'3 D: Capability type 

1P4 D: Capability option bit mask 

The type of a capability occupies the lower 18 bits of the Option bit/ 
Type field of which exactly 9 of the 18 bits must be set.* Table 1 



Possible 


errors 


Class 


# : 


7 


1 ( 


2 


2 


2 


3 


7 


4 



This arrangement allows the validity of the entire 60-bit field to 
be checked in one instruction (using the implication function). 
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below gives the types for ECS objects currently available, 



Table 1. Capability types 



Object 


Type 


Process 


"^8 


C-list 


^ 1-7-t 


File 


15773 


Operation 


1677^ 


Class Code 


1/3/3 


Event Channel 


1757g 


Allocation 


17673 


Block 



The option bit mask stored in a capability occupies the upper 42-bits 
of the Option bit/Type field and the meanings of the various option 
bits is determined by the type of object the capability identifies. 
See Appendix B for the name, description and relative position of all 
option bits. The option bit mask is checked for all required option 
bits. The positions of the bits are given reading from right to left; 
thus bit position is the low order bit of the field. 

Possible errors while changing parameter specification type from "none" 
to "user-supplied capability": 



Class 
6 
6 
6 
2 
2 
7 
7 
7 
7 



# 

1 
2 
2 
3 
2 
1 
2 
4 



Modifier Description 

No Allocation block 

No ECS available 

No money available 
2 Iiadex is negative 
2 Index is too large 

Capability type does not have exactly 9 bits set 

Operation does not exist 

Option bits bad 

Parameter specifica ;ion is not currently "none" 



56 



Change a parameter specification type from "user-supplied datum" to 
"fixed datum " 

IPl C: Capability for operation (OB.CHTYP) 
IP2 D: Index of parameter specification type 
IP3 D: 60-bit datum word 

Possible errors while changing parameter specification from "user- 
supplied datum" to "fixed datum": 

Class £_ Modifier Description 

6 No Allocation block 

6 1 No ECS available 

6 2 No money available 






2 2 2 Index is negative 

2 2 3 Index is too large 

7 5 Parameter specification is not currently 

"user-supplied datum" 



Change a parameter specification type from " user- supplied capability ' 
to "fixed capability " 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification type in operation 

IP3 C: A capability 

The capability supplied must agree in type and option bits with what 
is already in the operation. 

Possible errors while changing a parameter specification type from 
"user-supplied capability" to "fixed capability" 



Class 


# 


Modifier 


6 







6 


1 




6 


2 




7 


1 




2 


2 


2 


2 


2 


3 


7 


5 





No Allocation block 

No ECS available 

No money available 

Operation does not exist 

Index is negative 

Index is too large 

Parameter specification is not currently "user- 
supplied capability" 
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Note in the last two cases (4 and 5) that "fixing" a parameter speci- 
fication type requires two steps, changing the specification first to 
"user-supplied" type and then to the corresponding "fixed" type. 

Actions 3, 4, and 5 involve reallocating the operation in ECS, since 
each requires inserting one additional word to the order. 

E. Change parameter specification option bits for type "user-supplied 
capability " 

IPl C: Capability for operation (OB.CHOPT) 
IP2 D: Index of parameter specification 
IP3 D: Option bit mask 

After the parameter specification option bit mask has been specified when 
a parameter specification type is changed from "none" to "user-supplied 
capability", this action may be used to alter the mask. 

Possible errors while changing option mask: 

Description 

Index is negative 

Index is too large 

Operation does not exist 

Parameter specification type is not currently 
"user-supplied capability" 

F. Destroy an Operation 

IPl C: Capability for the operation to be destroyed (OB.DSTRY) 

This action may be used to destroy an operation created by the user. 
The only parameter required is the C-list index of the capability for 
the operation to be destroyed. 

Possible error when destroying an operation: 

Class #^ Description 

7 1 Operation does not exist 



Class 


# 


Modifier 


2 


2 


2 


2 


3 


2 


7 


1 




7 


5 
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User supplied parameters (with option bits) for ECS system 
and subprocess caii actions 



I Allocation Blocks 

A. Create an Allocation Block 

IPl C: Allocation Block (OB-CREAB) 

IPl D: C-list index for returned capability 

B . Transfer funds (and/or space) from one Allocation Block to another 

IPl C: Allocation Block (donor) (OB, GIVE) 

1P2 C: Allocation Block (donee) (OB. GET) 

IP3 D: Space to be transferred 

IP4 D: Money to be transferred 

C. Return capability for n-th object in Allocation Block 

IPl C: Allocation Block (OB. GOD) 

IP2 D: Full C-list index for returned capability 

IP3 D: Index of desired object (n) 

D. Destroy Allocation Block 

IPl C: Allocation Block to be destroyed (OB.DSTRY) 
II C— List Actions 

A. Create a C-list 

IPl C: Capability for Allocation block (OB.CRECL) 
IP2 D: Index in full C-list to return new capability 
IP3 D: Length of new C-list 

B. Display a capability from full C-list 
IPl D: Index in full C-list 

C. Display a capability from an arbitrary C-list 

IPl C: Capability for C-list 
IP2 D: Index in the C-list 
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D. Copy a capability within full C-list and decrease options 

IPl D: Index of desired capability 

1P2 D: Index of destination C-list entry 

IP3 D: Mask if options to preserve 

E. Copy capabil ity f rom full C-list to arbi t rary C-lisit (vice-versa) 

IPl C: Index of destination (source) C-list (OB.CPYIN, OB.CPYOT) 
IP2 D: Index within destination (source) C-list of capability 
IP3 D: Index in full C-list of source (destination) capability 

F. Change unique name in capability 

IPl D: C-list index of object (OB.CHNAM) 

G. Destroy a C-list 

IPl C: Capability for C-list (OB.DSTRY) 
III File Actions 

A. Create a File 

IPl C: Capability for an Allocation block (OB.CRFIL) 

IP2 D: C-list index to return capability 

IP3 D: Number of levels in file 

IP4 D: Pointer to list of shape numbers 

B. Create a Block 

IPl C: Capability for file (OB.CREBL) 
IP2 D: Address of block in file 

C. Check for missing blocks 

IPl C: Capability for file 

IP2 D: Address of block in file 

D. Read shape of a file 

IPl C: Capability for file 

IP2 D: Address of buffer for shape numbers 

IP3 D: Buffer size 

E. Read (Write) a File 

IPl C: Capability for file (OB.RDFIL, OB.WFILE) 

IP2 D: Address in file 

IP3 D: Address in CM 

IP4 D: Word count 
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Move a block of a file 

IPl C: Capability of a source file (OB.RDFIL, OB.DELBL) 

IP2 D: Address of source block. 

IP3 D: Capability for destination file (OB.WFILE, OB.CREBL) 

IP4 D: Address of destination block 



File to file 



copy 



IPl C: Source file (OB.RDFIL) 

IP2 D: Address in source file 

IP3 C: Destination file (OB.WFILE) 

IP4 D: Address in destination file 

IP5 D: Count of words to be transferred 

Delete a Block from a File 

IPl C: Capability for file (OB.DELBL) 

IP2 D: Address of block to be deleted 



I. Delete a File 

IPl C: Capability for file (OB.DSTRY) 
IV Process and Subprocess 

A. Create a class code 

IPl. C: Capability for class code 

B. Set temporary part of class code 

IPl C: Capability for class code (OB. TEMP) 
IP2 D: C-list index for modified class code 
I?3 D: New temporary part (30 bits) 

C. Create a Process 

Capability for Allocation block (OB.CREPR) 

C-list index for returned process capability 

Number of event channel chaining words 

Number of stack entries 

Class code for initial subprocess (OB.SONSP) 

Number of map entries in initial subprocess 

Compiled map buffer size for initial subprocess 

Subprocess field length 

Subprocess entry point 

Capability of C-list for subprocess (OB.LOCCL) 

Capability of file for 1st map entry (Read/Write: OB.WFILE, 

OB.RDFIL, OB.PLMAP) for initial subprocess 
Address within file 
D: Address in CM 

Count of words to be swapped 

Capability of file for 2nd map entry (Read Only: OB.RDFIL, 
OB.PLMAP) for initial subprocess 



IPl 


C: 


IP2 


D: 


IP3 


D: 


IP4 


D: 


IPS 


C: 


IP 6 


D: 


IP7 


D: 


IPS 


D: 


IP9 


D: 


IPIO 


C: 


IPll 


C: 


IP12 


D: 


IP13 


D: 


IP14 


D: 


IP15 


D: 
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IP16 D; Address within file 

IP17 D: Address in CM 

IP18 D: Count of words to be swapped 

D. Display Fixed Length Process Descriptor 

IPl C: Capability for the process 
IP2 D: Address of buffer area 
IP3 D: Size of buffer area 

E. Disp lay C lock Tim es 

IPl D: Address of buffer area 

F. Create a Subprocess 

IPl C: Capability for new subprocess class code (OB.SONSP) 

IP2 C: Capability for class code of the "father" of subprocess (OB.FATHR) 

IP3 D: Number of map entries 

IP4 D: Compiled map buffer size 

IP5 D: Subprocess field length 

IP6 D: Subprocess entry point 

IP7 C: Capability for subprocess local C-list index (OB.LOCCL) 

G. Display Subprocess Descr iptor 

IPl C: Class code (subprocess name) 
IP2 D: Address of buffer area 
IP3 D: Size of buffer area 

H. Subprocess call 

See Operations 
I, Subprocess return 

See Operations 
J. Subprocess F-return 

See Operations 
K. Subprocess Jump Return 

IPl C: Capability for class code of subprocess to return to (OB.SPRET) 
IP2 D: Number of stack occurrences of API to skip 

L. Return with Error 

IPl D: Error Class 
IP 2 D: Error Number 
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M. Modify P-counter of subprocess 

IPl C: Capability for class code of subprocess (OB.PCNT) 
IP 2 D: Number of stack occurrences of API to skip 
IP3 D: New P-counter 

N. Display stack 

IPl D: CM address of a buffer area 
IP2 D: Size of buffer area (>^ 4) 

0. Display stack entry 

IPl D: CM address of buffer 
IP 2 D: Desired stack entry 

P. Send process Interrupt 

IPl C: Capability for a process (OB.SDINT) 

IP2 C: Capability for a class code of a subprocess (OB.INTSP) 

IP3 D: An 18 bit interrupt datum 

Q. Set/Clear Interrupt Inhibit of Current Subprocess 

No parameters 
R. Reduce/Restore Path of Current Subprocess 

No parameters 

S. Set local ESM (Error Selection Mask) 

IPl D: Pointer to new ESM 

T. Set ESM in any subprocess 

IPl D: Pointer to new ESM 

IP2 C: Capability for class code (OB.STESM) 

U. Destroy a process 

IPl C: Capability for process to be destroyed (OB.DSTRY) 
V. Destroy a subprocess 

IPl C: Capability for the class code of subprocess to be destroyed (OB.DSTRY) 
W. Save (restore) registers 

IPl D: Pointer to 16 word buffer for registers 



b-3 



V Map Actions 

A. Zero a map entry 

IPl C: Class code (subprocess name) (OB.CHMAP) 
IP2 D: Index in logical map of subprocess 

^- Change (cr eate) a map entry (read/write or read only) 

IPl C: Class code of subprocess (OB.CHMAP) 
IP2 D: Index of map entry in API 

ivl n' TJT''^^''^'' ^^^^ ^^^^'^ °'^^^ °'' read/write) (OB.PLMAP.OB.RDFIL.OB.WFILE) 
J-t^^ D: Address in file 

IPS D: Address in CM 

IP6 D: Word count of new entry 

^- Display map entry from map of named subprocess 

IPl C: Class code for subprocess 

IP2 D: Index of entry in logical map of API 

IP3 D: Address of 3 word buffer 

D- Display entry in full map 

IPl D: Index of entry in full map 
IP2 D: Address of 3 word buffer 

E- Set Direct Access Map Entry 

IPl C: Class code (OB. DAE) 

IP2 C: File (OB.FDAE) 

IP3 D: File address of beginning of block 

IP4 D: Word count (mod lOOo) 

8 

F. Clear Direct Access Map Entry 
IPl C: Class code (OB.CHMAP) 
VI Event Channel Actions 

A. Create an event channel 

IPl C: Capability for allocation block (OB.CREEC) 
IP 2 D: C-list index for new event channel capability 
IP3 D: Length of event queue 

^- Send an e vent (with/without duplicate checking) 

IPl C: Capability for event channel (OB.SNDEV) 
IP2 D: Datum part of event 
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C. Get an event or hang 

IPl C: Capability for event channel (OB.GETEV) 

D. Get an event or F-return 

IPl C: Capability for event channel (OB.GTEVF) 

E . Get an event frotn one of a list of event channels or hang (F-return) 

IPl D: Pointer to list of event channel C-list indices (OB. SNDEV, . . ) 

(OB.GETEV or GTEVF. . .) 
IP2 D: Number of channels in list 

F . Destro^an even t channel 

IPl C: Capability for event channel (OB.USTRY) 
VII Operations 

A. Make a subprocess call or subprocess .jump operation , 

IPl C: Capability for Allocation block (OB.ALORD) 

IP2 D: C-list index to return new operation 

IP3 D: Type (0=call, nonzero=jump) 

IP4 C: Class code for subprocess called by new operation (OB.CALOP) 

IPS D: Number of parameters used by the subprocess call 

B. Add an order to an operation 

IPl C: Capability for Allocation block (OB.ALORD) 

IP2 D: C-list index to return new operation 

IP3 C: Capability for existing operation (OB.ADDOR) 

IP4 D: Type of order (0=call, nonzero=jump) 

IP5 C: Class code of subprocess called by new order (OB.CALOP) 

IP6 D: Number of new parameters being added 

C. Copy an operation of order n (n ^ 0) 

IPl C: Capability for Allocation block (OB.ALORD) 
IP2 D: Full C-list index for new operation 
IP3 C: Operation to copy (OB.ADDOR) 

Di. Change a parameter specification type from "none" to "user-supplied datum " 

IPl C: Capability for operation (OB.CHTYP) 
IP2 D: Index of parameter specification 

D2. Change a parameter specification type from "none" to "any capability" 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification type to change 
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n"^ n-.qr,rro □ r. a T- ame t" 6 ^ snecif icatlon tvoe from "none" to "user-supplied 
capability" 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification type 

IP3 D: Capability type 

IP4 D: Capability option bit mask 

D4 . Change a parameter specification type fr om "user-supplied^ da_tujm^_to^ 
"fixed-datum" 

IPl C: Capability for operation (OB.CHTYP) 
IP2 D: Index of parameter specification type 
IP3 D: 60-bit datum word 

D5 . Change a parameter specification t y pe from "user-supplied capability" 
to "fixed capability " 

IPl C: Capability for operation (OB.CHTYP) 

IP2 D: Index of parameter specification type in operation 

IP3 C: A capability 

E. Change Parameter Specification Option Bits for "user-supplied capability " 

IPl C: Capability of operation (OB.CHOPT) 
IP2 D: Index of parameter specification 
IP3 D: Option bit mask 

F. Destroy an Operation 

IPl C:Capability for operation to be destroyed (OB.DSTRY) 
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Object 

Allocation 
Block 



C-list 



File 



Process 



Subprocess 



Mnemonic 

OB.DSTRY 
0B.CHNA>1 
OB.CRMB 
OB.CRKCL 
OB.CRFIL 
OB.CRKFR 
OB.CRESP 
OB , CREEC 
OB.ALORD 
OB. GIVE 
OB. GET 
OB. GOD 

OB.DSTRY 
OB.CHNAM 
OB.CPYIN 
OB.CPYOT 
OB.LOCCL 

OB.DSTRY 
OB.CHNAM 
OB.CREBL 
OB.DELBL 
OB.RDFIL 
OB.WFILE 
OB.PLMPP 
OB.FUAE 

OB . DSTRY 
OB.CHNAM 
OB.SDINT 

OB.DSTRY 

OB. TEMP 

OB.FATHR 

OB.SPRET 

OB.PCNT 

OB.INTSP 

OB . CALOP 

OB.SONSP 

OB.CHMAP 

OB. DAE 

OB.STl'iSM 



/ Appendix B 
Options 

Description 

Destroy Allocation Block 

Change Unique name 

Create Allocation Block 

Create a C-list 

Create a file 

Create a process 

Create a subprocess 

^ .^- — ^ -1 1 

OieiJLt: ctli cveiiu i-iiciiiLicj. 

Create an operation 

Donor Allocation block 

Donee Allocation block 

Return capability of n-th object 

Destroy C-list 

Change unique name 

Copy capability into C-list 

Copy capability out of C-list 

Local C-Iist for initial subprocess 

Destroy a file 

Change unique name 

Create a block 

Delete a block 

Keact a j-Ij^g 

Write on the file 

Place portion of file in map 

Direct ECS Access 

Destroy a process 
Change unique name 
Interrupted process 



Relative 
Bit Position 


1 
2 
3 
4 
5 
6 

1 
I 

8 

9 
10 
11 



1 

2 
3 

4 


1 
2 
3 
4 
5 
6 
7 



1 



Destroy subprocess 

Set temporary part of class code 

Father subprocess 

Subprocess may be jump returned to 

P-counter of subprocess may be modified 

Interrupt subprocess 

Subprocess called by operator 

Son subprocess 

Create, zero, or change map entry 

Direct ECS Access map entry 

Set Error Selection Mask 




1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
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O bject Mnemonic Description 

Event OB.DSTRY Destroy event channel 

Channel OB.CHNAM Change unique name 

OB.SNDEV Send an event 

OB.GETEV Get an event (or hang) 

OB.GTEVF Get an event (or F-return) 



Relative 
Bit Position 


1 
2 
3 

4 



Operation OB.DSTRY Destroy an operation 

OB.CHNAM Change unique name 1 

OB.ADDOR Order may be added to operation 2 
OB.CHTYP Change parameter specification type 

in an operation 3 
OB.CHOPT Change option bits for "user- 
supplied capability" 4 
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Appendix C 
Error Classes and Numbers 

Class Numbers Description 

SCOPE call error class 

1 Arlth error class 

2 Parameter or pointer error class 
Parameter too small 

1 n -< 1 1 

X r ell ci lilt: Lt:jL Luu xctLgc 

Param niomber is masked into errnum 

2 Pointer is negative 

3 Pointer is too large 
Pointer is masked into errnum 

4 C-list index is negative 

5 C-list index is too large 
Index is masked into errnum 

3 File-processing error class 

File does not exist 

1 Block to be created exists 

2 Block is in map 

3 Block to be moved does not exist 

4 Block sizes not equal for move 

5 Block to be destroyed does not exist 

6 File to be destroyed is nonempty 

7 Negative shape number 

8 Shape number is too large 

9 Shape number is not power of two 
10 File size is too great 

4 Error class for subprocess creation, call, and return 

Duplicate subp name 

1 Named father does hot exist 

2 Block in swapping directive missing 

3 Not enough room for map 

4 Process becomes too big 

5 Named subp does not exist 

6 No room for subp in stack 

7 No room for parameters 

8 Too many capability params 

9 Empty stack (on return) 

10 Empty stack (on F-return) 

11 Attempt to delete subp in stack 
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Class Numbers Description 

5 Error class for process creation 

Block missing in swapping directive 

1 Not enougli room for map 
3 Process gone from MOT 

6 Allocation block error class 

No Allocation block 

1 Not enough space 

2 No more money 

7 Error in interpreting operation 

IPO not capability for operation 

1 Operation not in MOT 

2 Capability type or options bad 

3 Param spec (any) encountered 

4 Param spec (any) not encountered 

5 Should be user supplied parameter 

6 Order too big for scratch area 

7 Too many parameters 

8 Miscellaneous error class 

Capability list not in MOT 

1 Misc object hot in MOT 

9 Event channel error class 

Event queue too short 

1 Event queue too long 

2 Event channel not in MOT 

10 No subp to take error class 

11 Error class for maps 

Attempt to change or zero DAE 

1 DAE attempts to bridge blocks 

2 DAE action applied to swapping dir. 

3 Bad word count or missing file 



